Business and contact information
This Privacy Policy explains how Tomas Strigac collects, uses, stores and protects personal data when you visit tomasstrigac.com, request a quote, or order a service. It is provided in accordance with Articles 12 to 14 of Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act no. 78-17 of 6 January 1978 as amended.
The data controller is Tomas Strigac, entrepreneur individuel, SIREN 108 905 944, whose registered address is 12 Rue du Moulinet, 75013 Paris, France.
Because this is a sole trader business that does not carry out large-scale monitoring or process special categories of data on a large scale, no Data Protection Officer has been appointed, as permitted under Article 37 GDPR. All data protection matters are handled directly by Tomas Strigac at info@tomasstrigac.com.
Card numbers and other payment credentials are never collected, seen or stored by Tomas Strigac. Payments are processed entirely by the payment service provider, which acts as an independent data controller for that processing. Only the transaction reference, the amount, the status and the billing details necessary for accounting are received.
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to enquiries and preparing quotes | Steps at your request before a contract — Art. 6(1)(b) |
| Performing the service ordered and delivering the work | Performance of a contract — Art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Legal obligation — Art. 6(1)(c) |
| Handling complaints, withdrawal requests and disputes | Legal obligation and legitimate interests — Art. 6(1)(c) and (f) |
| Website security and fraud prevention | Legitimate interests — Art. 6(1)(f) |
| Analytics cookies | Your consent — Art. 6(1)(a) |
Where processing relies on legitimate interests, a balancing test has been carried out. You may object at any time, as described in section 7.
Personal data is never sold, rented or traded. Every recipient is named individually on the Data & Recipients page, together with what it handles, where it is established and in what role — rather than being described as a category. That page also sets out what is never shared with anyone, including the fact that documents are not passed to subcontractors or to any AI service.
Each processor acts on documented instructions under a contract meeting Article 28 GDPR. Legal advisers, courts or public authorities receive data only where the law requires it or a legal claim needs defending.
Data is stored and processed within the European Economic Area wherever possible. Where a provider processes data outside the EEA, the transfer is covered by an adequacy decision of the European Commission or by Standard Contractual Clauses adopted under Article 46 GDPR, with any additional safeguards required. A copy is available on request from info@tomasstrigac.com.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an order | 12 months from last contact |
| Client contact and order records | 3 years from the end of the commercial relationship |
| Invoices and accounting records | 10 years, as required by Article L123-22 of the French Commercial Code |
| Brief material and delivered work | 12 months after delivery, then deleted unless you ask for longer |
| Server logs | 12 months |
| Cookie consent records | 6 months |
If you would like your material deleted sooner, ask and it will be removed, except where a legal retention obligation applies.
Under Articles 15 to 22 GDPR you have the right of access, rectification, erasure, restriction, portability, and the right to object to processing based on legitimate interests. Where processing relies on consent you may withdraw it at any time without affecting what was lawful before. Under Article 85 of the French Data Protection Act you may also give directives on what happens to your data after your death.
Write to info@tomasstrigac.com. A response is provided within one month of receipt, extendable by two further months for complex requests, in which case you will be told within the first month. Proof of identity may be requested where there is reasonable doubt.
If you consider your data protection rights have not been respected, you may lodge a complaint with the French supervisory authority:
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr
You may also complain to the supervisory authority of the EU Member State where you live or work.
Appropriate technical and organisational measures are in place, including encrypted connections (HTTPS) across the whole website, access controls and strong authentication, restricted access to client material, and regular backups.
No method of transmission or storage is completely secure. In the event of a personal data breach likely to result in a risk to your rights, the CNIL will be notified within 72 hours in accordance with Article 33 GDPR, and you will be informed directly where the risk is high.
No automated decision-making or profiling producing legal effects, or similarly significantly affecting you, is carried out.
The services offered are directed at businesses and adults. Services are not knowingly provided to children under 15 and personal data relating to children is not knowingly collected. If you believe a child has provided personal data, contact info@tomasstrigac.com so it can be deleted.
This policy may be updated. The current version is always the one published on this page. Where a change materially affects how your data is processed, you will be informed directly wherever contact details are held.
For any question, contact Tomas Strigac at info@tomasstrigac.com, on +33 7 53 16 19 47, or in writing at 12 Rue du Moulinet, 75013 Paris, France.